MikroTik Basic Training Class PDF

MikroTik Basic Training Class
Introducing MikroTik
Course Objective
Overview of RouterOS software and RouterBoard capabilities

Hands-on training for MikroTik router configuration, maintenance and
basic troubleshooting
About MikroTik
Router software and hardware manufacturer

Products used by ISPs, companies and individuals
Make Internet technologies faster, powerful and affordable to wider
range of users
MikroTik's History
1995: Established
1997: RouterOS software for x86 (PC)
2002: RouterBOARD is born
2006: First MUM
Where is MikroTik?
www.mikrotik.com
www.routerboard.com
Riga, Latvia, Northern Europe, EU
Where is MikroTik ?
What is RouterOS ?
RouterOS is an operating system that will make your device:

a dedicated router
a bandwidth shaper
a (transparent) packet filter
any 802.11a,b/g/n/ac wireless device
What is RouterOS ?
The operating system of RouterBOARD

Can be also installed on a PC
What is RouterBOARD ?
Hardware created by MikroTik

Range from small home routers to carrier-class access concentrators
First Time Access
Null Modem Ethernet

Cable cable
Winbox
 The application for configuring RouterOS

 It can be downloaded from www.mikrotik.com
Download Winbox
Connecting
Click on the Mac-Address in Winbox

Default username “admin” and no password Ethernet
Cable
Winbox
Connecting
• Click on the [...] button to see your router

Communication
Process of communication is divided into seven layers

Lowest is physical layer, highest is application layer
MAC address
It is the unique physical address of a network device

It’s used for communication within LAN
Example: 00:0C:42:20:97:68
It is logical address of network device
1
9
IP
It is used for communication over networks

Example: 159.148.60.20
2
0
Subnets
 Range of logical IP addresses that divides network into segments

 Example: 255.255.255.0 or /24
Subnets
Network address is the first IP address of the subnet

Broadcast address is the last IP address of the subnet
They are reserved and cannot be used
Selecting IP address
Select IP address from the same subnet on local networks

Especially for big network with multiple subnets
Selecting IP address Example
Clients use different subnet masks /25 and /26

A has 192.168.0.200/26 IP address
B use subnet mask /25, available addresses 192.168.0.129-
192.168.0.254
B should not use 192.168.0.129-192.168.0.192
B should use IP address from 192.168.0.193 - 192.168.0.254/25
Upgrading Router
Use
Combined RouterOS package
Drag it to the Files window
Package Management
 RouterOS functions are enabled by packages

Package Information
Router Identity
 Option to set name for each router

Router Identity
 Identity information is shown in different places

NTP
 Network Time Protocol, to synchronize time

 NTP Client and NTP Server support in RouterOS
Why NTP
To get correct clock on router

For routers without internal memory to save clock information
For all RouterBOARDs

NTP Client
 NTP package is not required

Configuration Backup
You can backup and restore configuration in the Files menu of

Winbox
Backup file is not editable
Configuration Backup
 Additionally use export and import commands in CLI

 Export files are editable
 Passwords are not saved with export
 /export file=conf-august-2009
 / ip firewall filter export file=firewall-aug-2009
 / file print
 / import [Tab]
Netinstall
Used for installing and reinstalling RouterOS

Runs on Windows computers
Direct network connection to router is required or over switched LAN
Available at www.mikrotik.com
Netinstall
 1.List of routers
 2.Net Booting
 3.Keep old configuration
 4.Packages
 5.Install
RouterOS License
 All RouterBOARDs shipped with license

 Several levels available, no upgrades
 Can be viewed in system license menu
 License for PC can be purchased from mikrotik.com or from
distributors
License
Obtain License
Login to
your account
Useful Links
www.mikrotik.com - manage licenses, documentation

forum.mikrotik.com - share experience with other users
www.forummikrotik.com - share experience with other users
wiki.mikrotik.com - tons of examples
Bandwidth Test Utility
Bandwidth test can be used to monitor throughput to remote device

Bandwidth test works between two MikroTik routers
Bandwidth test utility available for Windows
Bandwidth test is available on MikroTik.com
Bandwidth Test on Router
Set Test To as testing address

Select protocol
TCP supports multiple connections
Authentication might be required
Access to Local Network
Plan network design carefully

Take care of user’s local access to the network
Use RouterOS features to secure local network resources
• Address Resolution Protocol
ARP joins together client’s IP address with MAC-address

ARP operates dynamically, but can also be manually configured
ARP Table
ARP table
provides: IP
address, MAC-
address and
Interface
Static ARP table
To increase network security ARP entries can be crated manually

Router’s client will not be able to access Internet with changed IP
address
Static ARP configuration
Add Static Entry to ARP table

Set for interface arp=reply-
only to disable dynamic
ARP creation
Disable/enable interface or
reboot router
DHCP Server
Dynamic Host Configuration Protocol

Used for automatic IP address distribution over local network
Use DHCP only in secure networks
DHCP Server
To setup DHCP server you should have IP address on the

interface
Use setup command to enable DHCP server

It will ask you for necessary information
DHCP-Server Setup
Click
Time
Set
SetDNS
Set on
that
Network DHCP
Addresses
server
client
Gateway Setup
address
for may
thatuse
DHCP,
for
that to
will
willWe
run
bebeIPare
givendone!
Setup
assigned
address
toWizard
clients
to clients
offered
DHCP automatically
clients
Select interface for
DHCP server
Important
 To configure DHCP server on bridge, set server on bridge interface

 DHCP server will be invalid, when it is configured on bridge port
4
DHCP Server Information
 Leases provide information

about DHCP clients
Winbox Configuration Tip
 Show or hide different Winbox columns

Static Lease
We can make lease to

be static
Client will not get

other IP address
Static Lease
DHCP-server could run without dynamic leases

Clients will receive only preconfigured IP address
Route
ip route rules define where packets should be sent
Let’s look at /ip route rules

Routes
Destination: networks
which can be reached
Gateway:
IP of the next router to
reach the destination
Default Gateway
 Default gateway: next hop router where all (0.0.0.0) traffic is sent
Dynamic Routes
Look at the other routes

Routes with DAC are
added automatically
DAC route comes from IP

address configuration
Routes
A - active
D - dynamic
C - connected
S - static
Static Routes
Our goal is to ping neighbor laptop

Static route will help us to achieve this
Static Route
Static route specifies how to reach specific destination network

Default gateway is also static route, it sends all traffic (destination
0.0.0.0) to host - the gateway
Static Route
Additional static route is required to reach your neighbor laptop

Because gateway (teacher’s router) does not have information about
student’s private network
Route to Your Neighbor
Remember the network structure

Neighbor’s local network is 192.168.x.0/24
Ask your neighbor the IP address of their wireless interface
Network Structure
2
2
Route Your Neighbor
Add static route

Set Destination
and Gateway
Try to ping
Neighbor’s
Laptop
Dynamic Routes
The same configuration is possible with dynamic routes

Imagine you have to add static routes to all neighbors networks
Instead of adding tons of rules, dynamic routing protocols can be
used
Dynamic Routes
Easy in configuration, difficult in managing/troubleshooting
Can use more router resources

Dynamic Routes
We are going to use OSPF

OSPF is very fast and optimal for dynamic routing
Easy in configuration
OSPF configuration
Add correct network to

OSPF
OSPF protocol will be

enabled

MikroTik Basic Training Class PDF

Uploaded by

Copyright:

Available Formats

MikroTik Basic Training Class PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

MikroTik Basic Training Class PDF

Uploaded by

Copyright:

Available Formats

MikroTik Basic Training Class

Overview of RouterOS software and RouterBoard capabilities

Router software and hardware manufacturer

RouterOS is an operating system that will make your device:

The operating system of RouterBOARD

Hardware created by MikroTik

Null Modem Ethernet

 The application for configuring RouterOS

Click on the Mac-Address in Winbox

• Click on the [...] button to see your router

Process of communication is divided into seven layers

It is the unique physical address of a network device

It is used for communication over networks

 Range of logical IP addresses that divides network into segments

Network address is the first IP address of the subnet

Select IP address from the same subnet on local networks

Clients use different subnet masks /25 and /26

 RouterOS functions are enabled by packages

 Option to set name for each router

 Identity information is shown in different places

 Network Time Protocol, to synchronize time

To get correct clock on router

For all RouterBOARDs

 NTP package is not required

You can backup and restore configuration in the Files menu of

 Additionally use export and import commands in CLI

Used for installing and reinstalling RouterOS

 3.Keep old configuration

 All RouterBOARDs shipped with license

www.mikrotik.com - manage licenses, documentation

Bandwidth test can be used to monitor throughput to remote device

Set Test To as testing address

Plan network design carefully

ARP joins together client’s IP address with MAC-address

To increase network security ARP entries can be crated manually

Add Static Entry to ARP table

Dynamic Host Configuration Protocol

To setup DHCP server you should have IP address on the

Use setup command to enable DHCP server

 To configure DHCP server on bridge, set server on bridge interface

 Leases provide information

 Show or hide different Winbox columns

We can make lease to

Client will not get

DHCP-server could run without dynamic leases

ip route rules define where packets should be sent

Let’s look at /ip route rules

Look at the other routes

DAC route comes from IP

Our goal is to ping neighbor laptop

Static route specifies how to reach specific destination network

Additional static route is required to reach your neighbor laptop

Remember the network structure

Add static route

The same configuration is possible with dynamic routes

Easy in configuration, difficult in managing/troubleshooting

Can use more router resources

We are going to use OSPF

Add correct network to